Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2016-10036

EPSS 13.50% · P94
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2016-10036

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Unrestricted file upload vulnerability in ui/artifact/upload in JFrog Artifactory before 4.16 allows remote attackers to (1) deploy an arbitrary servlet application and execute arbitrary code by uploading a war file or (2) possibly write to arbitrary files and cause a denial of service by uploading an HTML file.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
JFrog Artifactory 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
JFrog Artifactory是以色列JFrog公司的一款开源的通用Artifact存储库管理器，它支持集群和高可用性Docker注册表并提供端到端的用于跟踪从开发到生产的工件自动化解决方案。 JFrog Artifactory 4.16之前版本中的ui/artifact/upload存在任意文件上传漏洞。远程攻击者可通过上传war文件或HTML文件利用该漏洞执行任意代码或在服务器上创建或覆盖文件并造成拒绝服务。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2016-10036

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2016-10036

请登录查看更多情报信息。

Same Patch Batch · n/a · 2018-05-01 · 24 CVEs total

CVE-2018-9336OpenVPN 安全漏洞
CVE-2018-10260HRSALE The Ultimate HRM 安全漏洞
CVE-2018-10259HRSALE The Ultimate HRM 跨站脚本漏洞
CVE-2018-10258Shopy Point of Sale 代码注入漏洞
CVE-2018-10257HRSALE The Ultimate HRM 代码注入漏洞
CVE-2018-10256HRSALE The Ultimate HRM SQL注入漏洞
CVE-2018-10255clustercoding Blog Master Pro 代码注入漏洞
CVE-2013-4209Red Hat Automatic Bug Reporting Tool 安全漏洞
CVE-2013-4201Katello 授权问题漏洞
CVE-2013-2049Red Hat CloudForms 2 Management Engine 安全漏洞
CVE-2013-0185Red Hat ManageIQ EVM 跨站请求伪造漏洞
CVE-2013-0159Fedora fedora-business-cards 后置链接漏洞
CVE-2018-10371WordPress wunderfarm WF Cookie Consent插件跨站脚本漏洞
CVE-2018-9232Gongjin Electronics T&W WIFI Repeater BE126 安全漏洞
CVE-2013-4040IBM Tivoli Application Dependency Discovery Manager for Unix 安全漏洞
CVE-2013-4035IBM Sterling Connect:Direct for OpenVMS 安全漏洞
CVE-2017-18264phpMyAdmin 安全漏洞
CVE-2018-8939Ipswitch WhatsUp Gold 安全漏洞
CVE-2018-8938Ipswitch WhatsUp Gold 代码注入漏洞
CVE-2018-10583LibreOffice和Apache OpenOffice 信息泄露漏洞

Showing top 20 of 24 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2016-10036

No comments yet

Leave a comment